# Tracking down which username and password are compromised **URL:** \ **Category:** Factual Questions\ **Created:** [December 13, 2024, 7:48pm UTC](https://boards.straightdope.com/t/tracking-down-which-username-and-password-are-compromised/1011616 "2024-12-13T19:48:15Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![RitterSport](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/rittersport/32/6326_2.png) [@RitterSport](https://boards.straightdope.com/u/RitterSport)\ **Post date:** [December 13, 2024, 7:48pm UTC](https://boards.straightdope.com/t/tracking-down-which-username-and-password-are-compromised/1011616/1 "2024-12-13T19:48:15Z")
I occasionally go to a website and log in, and Chrome will tell me to update my password because that username/password combo has been compromised. Is there any way for me to get access to the data that Chrome is using? I’d love to see which email address and password combos are compromised to I only change the ones I care about. For low security sites where I don’t have any important financial information, I don’t really care if someone hacks in, but other ones I care about. Anyway, that’s my question. Is there a place where I can type in, say, a username or email address and have it return all the compromised passwords (and maybe which sites were compromised to get that info)? ---
**Author:** ![scabpicker](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/scabpicker/32/8268_2.png) [@scabpicker](https://boards.straightdope.com/u/scabpicker)\ **Post date:** [December 13, 2024, 7:54pm UTC](https://boards.straightdope.com/t/tracking-down-which-username-and-password-are-compromised/1011616/2 "2024-12-13T19:54:15Z")
You can use have i been pwned to check them: > **[Have I Been Pwned: Check if your email has been compromised in a data breach](https://haveibeenpwned.com/)** > > Have I Been Pwned allows you to search across multiple data breaches to see if your email address or phone number has been compromised. ETA, it won’t tell you the password, though. ---
**Author:** ![RitterSport](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/rittersport/32/6326_2.png) [@RitterSport](https://boards.straightdope.com/u/RitterSport)\ **Post date:** [December 13, 2024, 8:05pm UTC](https://boards.straightdope.com/t/tracking-down-which-username-and-password-are-compromised/1011616/3 "2024-12-13T20:05:07Z")
Yeah, that’s annoying. I could see not giving it out to anyone (because that would be an easy way to hack in to someone’s accounts), but how about sending a report to my email address that’s attached to the hacked accounts? Seems more secure. Anyway, I thinking that info is not publicly available. ---
**Author:** ![Czarcasm](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/czarcasm/32/4050_2.png) [@Czarcasm](https://boards.straightdope.com/u/Czarcasm)\ **Post date:** [December 13, 2024, 8:14pm UTC](https://boards.straightdope.com/t/tracking-down-which-username-and-password-are-compromised/1011616/4 "2024-12-13T20:14:08Z")
I’ve used it, and am still in the clear…but I’ve got a friend that is so compromised that she might as well post her private info on billboards around the world. ---
**Author:** ![RitterSport](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/rittersport/32/6326_2.png) [@RitterSport](https://boards.straightdope.com/u/RitterSport)\ **Post date:** [December 13, 2024, 8:20pm UTC](https://boards.straightdope.com/t/tracking-down-which-username-and-password-are-compromised/1011616/5 "2024-12-13T20:20:02Z")
My gmail address shows that it’s pwned, but I’m pretty sure that’s other people using my address in error. I get a ton of people doing that. My hotmail address is also pwned, but my live and outlook ones are OK. ---
**Author:** ![psychonaut](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/psychonaut/32/4655_2.png) [@psychonaut](https://boards.straightdope.com/u/psychonaut)\ **Post date:** [December 13, 2024, 8:26pm UTC](https://boards.straightdope.com/t/tracking-down-which-username-and-password-are-compromised/1011616/6 "2024-12-13T20:26:31Z")
> [@RitterSport](#): > > Yeah, that’s annoying. I could see not giving it out to anyone (because that would be an easy way to hack in to someone’s accounts), but how about sending a report to my email address that’s attached to the hacked accounts? Seems more secure. It does do that (that is, send you a report – not the password) if you sign up for their free notification service. ---
**Author:** ![RitterSport](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/rittersport/32/6326_2.png) [@RitterSport](https://boards.straightdope.com/u/RitterSport)\ **Post date:** [December 13, 2024, 8:31pm UTC](https://boards.straightdope.com/t/tracking-down-which-username-and-password-are-compromised/1011616/7 "2024-12-13T20:31:46Z")
That’s pretty useful. Thanks! Of my gmail address pwnage, the only one that might actually be mine are evite and linkedin. The rest are other people using my address by accident. ---
**Author:** ![markn\_1](https://avatars.discourse-cdn.com/v4/letter/m/f9ae1b/32.png) [@markn\_1](https://boards.straightdope.com/u/markn_1)\ **Post date:** [December 13, 2024, 8:33pm UTC](https://boards.straightdope.com/t/tracking-down-which-username-and-password-are-compromised/1011616/8 "2024-12-13T20:33:01Z")
To see the data that Chrome uses, go to [passwords.google.com](http://passwords.google.com), then click on Password Checkup → Check Passwords. ---
**Author:** ![RitterSport](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/rittersport/32/6326_2.png) [@RitterSport](https://boards.straightdope.com/u/RitterSport)\ **Post date:** [December 13, 2024, 8:41pm UTC](https://boards.straightdope.com/t/tracking-down-which-username-and-password-are-compromised/1011616/9 "2024-12-13T20:41:51Z")
Thanks. I don’t use Chrome (or Firefox, etc.) to store my passwords, so there are none there.